[K12OSN] ssh and a wierd problem. . .

Petre Scheie petre at maltzen.net
Tue Jul 27 20:11:16 UTC 2004


I'm seeing something similar: ssh to FC1 (k12ltsp 4.0.1) via LAN is 
fine, but coming from outside through firewall stalls for...let's 
see...roughly two minutes and fifteen seconds after I've entered my 
password.  After that time elapses, I finally get a prompt.  Or if I'm 
impatient, Ctrl-C will drop me to a bare prompt.  My kludge workaround 
has been then to run '. .bashrc'.  I just figured it was the firewall 
blocking something.  But it happens no matter where I connect from, 
although it doesn't happen on other sites that I connect to.  This 
problem site has just the one box.  My source address won't resolve to a 
name though, but that doesn't explain why other sites I connect to don't 
have the same problem.  My home webserver is also FC1 but not K12ltsp 
and it does not have this problem.

Petre

Doug Simpson wrote:

>This has always not been a problem until these last two servers, though.
>
>It has always just worked. . .
>
>Thanks. . .
>
>
>
>Doug Simpson
>Technology Specialist
>DeQueen Public Schools
>DeQueen, AR 71832
>simpsond at leopards.k12.ar.us
>Tux for President!
>
>On Tue, 27 Jul 2004, Les Mikesell wrote:
>
>  
>
>>On Tue, 2004-07-27 at 11:07, Doug Simpson wrote:
>>    
>>
>>>Fedora Core 1 (several boxen are doing this, all installed from the same 
>>>cd set. . .)
>>>
>>>If you ssh into the server from the LAN, it goes right in and all is well.
>>>
>>>If you ssh in from outside (like from home) it gives you the last logged 
>>>in information like it is supposed to and then sits there for the rest of 
>>>your life, unless you CTRL-C at which time it drops you to the 
>>>naked bash propmt (looks like the one you get when you boot the server to 
>>>single-user).
>>>
>>>Any ideas how to fix this?
>>>      
>>>
>>Among other things that happen when you log in, the system tries to
>>do an IDENT query back to the source of the connection and a DNS
>>lookup for the connecting IP address.  These should time out eventually
>>but could take a few minutes if a firewall drops the query or
>>response.  It might also look up the DNS name for the interface
>>you connect on.
>>
>>---
>>  Les Mikesell
>>    les at futuresource.com
>>
>>
>>
>>_______________________________________________
>>K12OSN mailing list
>>K12OSN at redhat.com
>>https://www.redhat.com/mailman/listinfo/k12osn
>>For more info see <http://www.k12os.org>
>>
>>    
>>
>
>
>_______________________________________________
>K12OSN mailing list
>K12OSN at redhat.com
>https://www.redhat.com/mailman/listinfo/k12osn
>For more info see <http://www.k12os.org>
>
>  
>





More information about the K12OSN mailing list